Beyond the Grade: The Student Cybersecurity Intern Guarding Local Livelihoods
By Shadrack
KAMPALA, Uganda - The smell of yeast and burnt sugar usually signals a productive morning at the local bakery on the corner. But on a Tuesday morning last month, the only thing rising was the owner’s blood pressure. A single, misplaced click on a “shipping update” email had triggered a silent catastrophe. Within minutes, two years of digital tax records, inventory logs, and supplier contacts vanished behind a wall of encryption.
For Jonathan Aloya, a senior cybersecurity intern at a local technology center, that moment was a wake-up call that couldn’t be ignored.
“I saw the impact firsthand,” Aloya said during a recent interview. “That bakery wasn’t just a business; it was a neighbor’s life. When they lost their data, they lost their history.”
Aloya, who specializes in Amazon Web Services (AWS) infrastructure, is part of a growing movement of student-led initiatives aimed at bridging the “real-world gap” in cybersecurity. While many students focus on the technical perfection of a classroom lab, Aloya and his peers are providing free cloud-security audits to local small businesses, a demographic increasingly targeted by sophisticated ransomware threats.
The Human Stakes of Data
In the sterile environment of a computer lab, a misconfigured server is a learning opportunity, a red X on a rubric. In the marketplace, it is a liability that can end a legacy.
According to the Cybersecurity and Infrastructure Security Agency (CISA), small businesses are often viewed as “soft targets” by hackers because they lack the enterprise-level budgets required for full-time security teams. CISA reports that small firms are the target of nearly 43% of all cyberattacks, yet many lack even basic incident response plans.
“The classroom is controlled and predictable,” Aloya explained. “But real-world environments are messy. Busy business owners often give administrator access to multiple employees just to keep the workflow moving. They prioritize convenience, which is exactly what a phisher is looking for.”
Aloya’s most frequent discovery during his audits is the misconfiguration of Identity and Access Management (IAM) protocols. In technical terms, it involves failing to apply the “principle of least privilege.” In human terms, it means giving every employee the “master keys” to the digital castle.
“If a delivery driver has the same administrative permissions as the owner, one compromised laptop can sink the entire company,” Aloya noted.
A Mission of Community Self-Reliance
The project is more than a technical checklist; it is a philosophy of community support. Sarah Jenkins, IT director at the local technology center and the academic advisor for the program, believes the students are gaining something no textbook can provide: empathy.
Get Epaku Shadrack Kenneth’s stories in your inbox
Join Medium for free to get updates from this writer.
“Shared interests unite people,” Jenkins said. “A secure local economy is a primary shared interest. While the students are applying high-level AWS models, they are also learning soft skills, such as how to communicate risk without causing panic.”
Jenkins noted that the transition from a laboratory to a client-facing role is the biggest challenge for students. It requires moving away from technical jargon and into the realm of human impact.
“Our mission is community self-reliance,” Jenkins added. “If our students can protect ten businesses this semester, that’s ten families whose livelihoods are more secure. We want them to see the person behind the IP address.”
The $4.45 Million Risk
The financial stakes justify the students’ urgency. According to the 2025 IBM Cost of a Data Breach Report, the average cost of a data breach has climbed to $4.45 million globally. For a small business in Kampala, a fraction of that cost is enough to force a permanent closure.
Aloya spends his Saturday mornings walking through local shops, not to buy goods, but to check router settings and backup schedules. He has found that many owners believe they are “too small to be noticed” by hackers.
“That is the biggest myth in the industry,” Aloya said. Hackers use automated bots. They don’t care who you are; they just care that your door is unlocked.
Failure is Not a Grade
The pressure of this responsibility is something Aloya carries into every audit. He admits that the shift in stakes has changed the way he views his own education.
“In the classroom, failure is just a grade, but in the field, failure is someone’s livelihood,” Aloya said.
This perspective has turned his “done is better than perfect” mantra, a common student strategy for meeting deadlines, into a rigorous standard of professional care. He no longer sees a server as a set of code, but as the backbone of a neighbor’s dream.
As AI-driven phishing attacks become more common, the vulnerabilities are changing. Hackers are now using deep-fake technology and automated bots to find the “cracks” in small business armor. Aloya is currently working to stay ahead of these trends, hoping to complete 25 more audits before the end of the year.
Looking Ahead
For the business owners who have received Aloya’s audits, the result is more than just a secure cloud environment. It is what Jenkins calls “digital peace of mind.” In an era where a single email can bankrupt a shop, having a student expert in your corner is a powerful defense.
As for Aloya, the experience has solidified his career path. He is no longer just a student chasing a degree; he is a specialist serving his community. By bridging the gap between classroom theory and professional impact, he is proving that sometimes the best way to learn how to build a digital wall is to stand guard over the people behind it.
“Cybersecurity is often seen as a cold, robotic field,” Aloya concluded. “But at its heart, it’s about people. If I can help one owner keep their doors open, then the work is worth more than any A on a transcript.”
